Public Policy
Vulnerability Disclosure Policy Requirements for UK Smart Products
New security regulations for connected devices and related guidance enter into force in the UK at the end of April.
Security Compliance,
Public Policy
Are You Ready for the New NIST Control Around Public Disclosure Programs?
August 14th, 2023
A new NIST control requires SaaS vendors to “establish a public reporting channel for receiving reports of vulnerabilities in organizational systems and system components.”
Security Compliance,
Public Policy
New SEC Cyber Rules Incentivize Proactive Security Measures
August 9th, 2023
SEC’s Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure Rule The SEC’s final rule...
Public Policy,
Security Compliance
GUEST BLOG: Governments Across The World Are Mandating Vulnerability Disclosure So Why Are Companies Sitting On Their Hands?
May 24th, 2023
The IoT Security Foundation’s fifth annual report into the state of vulnerability disclosure consumer Internet...
Public Policy,
Security Compliance
FDA's New Cybersecurity Requirements: Are You Prepared as a Medical Device Manufacturer?
May 12th, 2023
Where To Begin? Companies submitting products for FDA approval must do the following: Provide details of their...
Public Policy,
Security Compliance
HackerOne Responds To The Review of The UK’s Computer Misuse Act (CMA)
April 19th, 2023
By Ilona Cohen , Chief Policy Officer, and Michael Woolslayer , Policy Counsel The U.K. is in the midst of a...
Get the latest news and insights beamed directly to you
Public Policy,
Security Compliance
Cyber Regulations Can Make Our Nation Safer
March 29th, 2023
While a largely voluntary approach to critical infrastructure cybersecurity has led to some improvements, a...
Public Policy,
Security Compliance
How Human Security Testing Helps the U.S. Government’s Zero Trust Mandate
January 9th, 2023
One major reason for the progress is a May 2021 Executive Order that pushes federal agencies to speedily...
Ethical Hacker,
Expert Interviews,
HackerOne Community Blog,
Public Policy
Calling All “Bureaucracy Hackers”
March 5th, 2018
Lisa Wiswell, a HackerOne advisor and a principal at GRIMM cybersecurity firm, thinks the government needs...
Policy Comments
When regulators have questions about policies and standards around the world, HackerOne has the answers.
- February 5, 2024: HackerOne NY Hospital Cybersecurity Requirements Comments
- February 2, 2024: Comments on NIST RFI on Artificial Intelligence Executive Order
- February 2, 2024: Comments on Cybersecurity for Unclassified Federal Information Systems (FAR Case 2021-019)
- February 2, 2024: Comments on Federal Contractor Cybersecurity (FAR Case 2021-017)
- April 6, 2023: Response to UK Computer Misuse Act Consultation
- June 23, 2023: Response to CISA Secure Software Attestation Form
- July 12, 2023: Response to NIST 800-171r3 Draft
- November 6, 2023: Comments to NIST CSF 2.0 Public Draft
- December 21, 2023: Comments on DMCA Section 1201 Generative AI Research
- March 19, 2022: Comments on UK DCMS Cyber Profession Pathway
- July 7, 2022: Comments on FDA Cybersecurity in Medical Devices
- December 14, 2022: Comments on Cyber Requirements for Federal Insurance
- June 08, 2021: Response to UK Computer Misuse Act Call for Information
- September 3, 2020: Proposals for Regulating Consumer Smart Product Cyber Security
- September 10, 2020: Comments on NIST SP 800-53B
External Press
New hacker advocacy group seeks to protect work of security researchers
Cyber regulations can make our nation safer
The Role of Regulation in Comprehensive Cybersecurity
A new hackathon is helping to make elections more secure
Cybersecurity firms to launch legal support fund, advocacy group for ethical hackers
CISA releases HBOM framework for supply chain risk management